Our payment process is secure. The way we're able to guarantee that our payment process is secure is by having nothing to do with it.
A customer's credit card number will never touch our servers. Our online payment form works against Stripe directly. Since a credit card never crosses our paths, we hope we can never be the ones to screw things up.
When a payment is processed with Stripe we see the credit card or funding source as a "payment token." We can see only the last 4 digits of the card, it's expiration date, etc. and after the first payment the full number and CVC are never seen again.
If the customer were to fill out the payment form herself, in theory we would never have to know the full credit card number at all.
0 Comments